Privacy Policy
Last updated: 8 November 2026
Website
This site is static and hosted on GitHub Pages. Whatever you enter in the online tools (domain names, passwords, IBANs, JSON and so on) is processed in your browser and is not sent to a server belonging to this site. Some tools call public services directly to produce a result: Google Public DNS (dns.google), Cert Spotter, RDAP, ipwho.is / ipify, Cloudflare speed-test endpoints, ExchangeRate-API and Gold API (exchange and gold rates), Apple iTunes image servers (app icons) and Have I Been Pwned (only the first 5 characters of a password hash). In the image compressor and PDF merger, files are never uploaded. Those services' own privacy policies apply.
Game scores and tool usage counters are sent to Google Firebase (Firestore, Frankfurt) as numbers that are not linked to a person; no name, e-mail or device ID is sent. Your theme and cookie choice are kept in your browser's local storage. Visits are counted with Cloudflare Web Analytics, which uses no cookies and does not identify you.
Google Analytics and cookies
We use Google Analytics 4 to measure how the site is used, only if you allow it. On your first visit you choose in the banner at the bottom: if you Accept, Google Analytics loads, measurement cookies (_ga, _ga_*) are set, and information such as pages viewed, approximate location (country/city), device and browser type is processed as aggregate statistics. If you Decline, Google Analytics is never loaded and no measurement data is sent to Google. Advertising and personalisation are always off.
You can change your choice anytime via Cookie settings at the bottom of the page; when you withdraw consent, measurement stops and the Analytics cookies are deleted.
Mobile apps
Each app has its own privacy policy: MasaPlay, LiarLoop, Netgaze, Parakit, StreakFlow, KeepHold / Kasam.
In StreakFlow, Parakit, Netgaze and KeepHold your records stay on your device. In MasaPlay and LiarLoop, account and game data for online play are stored on Supabase servers in Frankfurt (Germany). Details are in each app's privacy policy and KVKK notice, and in the “App Privacy” (App Store) and “Data safety” (Google Play) sections.
Information under the Turkish Personal Data Protection Law (KVKK, Law No. 6698, Art. 10)
Data controller: Mehmet Fatih İçin · support@mfatihicin.com
Data, purposes and legal bases
- IP address, browser and request details when pages are requested: processed by the hosting provider GitHub to serve and secure the site — legitimate interest (Art. 5/2-f).
- Google Analytics 4 cookies and usage statistics (pages viewed, approximate location, device/browser type): only if you click “Accept” — explicit consent (Art. 5/1). You can withdraw it anytime via “Cookie settings”.
- Cookieless, non-identifying visit counting with Cloudflare Web Analytics (page address, referrer, browser type; IP addresses are not stored): to improve the site — legitimate interest (Art. 5/2-f).
- Storing your cookie choice and theme in your browser: to remember your preference — legitimate interest (Art. 5/2-f).
- When fonts load from Google Fonts, your IP address is sent to Google — legitimate interest (Art. 5/2-f).
- What you enter in the online tools is not sent to a server belonging to this site; some tools call the public services listed above directly, and those services see your IP address.
- E-mails you send us: to answer your request — contract/request (Art. 5/2-c), legal obligation (Art. 5/2-ç).
Collection method: electronically, through the requests your browser makes to the site and (if you allow it) analytics cookies.
Transfers abroad: GitHub Inc. (hosting, USA), Google LLC (Analytics, Fonts and Firebase; USA and other countries), Cloudflare Inc. (visit counting, USA). There is no adequacy decision of the Turkish Board for these countries; transfers fall under KVKK Art. 9. As of today no KVKK standard contract has been signed with these providers and notified to the Authority; we rely on the data protection commitments in the providers' terms and have requested that standard contracts be signed.
Retention: in Google Analytics, event-level data is kept for 2 months and user-level data for 14 months (the retention setting in the Analytics account); hosting logs for the provider's own periods; e-mails for up to 3 years after the request is closed.
Your rights (KVKK Art. 11): to learn whether your data is processed, request information, learn the purpose and recipients, request correction or deletion and notification of these to recipients, object to results of automated analysis, and claim compensation.
Requests: support@mfatihicin.com. We answer within 30 days, free of charge. If you are not satisfied, you can complain to the Turkish Personal Data Protection Board. See also Legal information and contact.